Free AuditEnterprise AIShelfSense
Back to Blog
RetailApr 19, 202610 min read

Cannabis Dispensary Inventory — METRC, BioTrack, and the Reality of Track-and-Trace

Four track-and-trace platforms (METRC, BioTrack, Leaf, state-specific), three event categories (receive, sale, adjustment), where dispensaries fall short, what disciplined operations look like.

SE

ShelfLifePro Editorial Team

Inventory management insights for retail and pharmacy

Why cannabis inventory is the most-regulated retail category in America

Cannabis dispensaries operate under the heaviest inventory-tracking regime of any US retail category. Every gram, every plant, every package, every transfer between rooms, every adjustment, every disposal must be logged into the state-mandated track-and-trace system (typically METRC, BioTrack THC, or a state-specific equivalent) — usually within 24 hours of the event, sometimes in real time.

Get it wrong and the consequences range from monetary fines to license suspension to license revocation. Cannabis regulators in mature markets (California, Colorado, Washington, Oregon, Massachusetts, Michigan, Illinois) audit aggressively because the federal-state legal mismatch makes diversion a constitutional issue.

This post walks through what disciplined cannabis dispensary inventory operations actually look like and where most operators fall short.

Free Tool

Not sure how much you're losing to expiry?

Run a free inventory waste audit — find your bleeding SKUs in 60 seconds. No sign-up required.

Run free audit

The four state track-and-trace platforms

METRC — used in California, Colorado, Maine, Maryland, Michigan, Missouri, Montana, Nevada, Ohio, Oregon, West Virginia, and several others. The dominant platform.

BioTrack THC — used in Hawaii, North Dakota, Puerto Rico, others. Older but still active.

Leaf Data Systems — used in Pennsylvania, Washington, Utah.

State-specific systems — Florida (Confident Cannabis), New York (NYS OCM portal), New Jersey, Massachusetts (state-specific systems separately from METRC).

Each has its own data model, API, reporting requirements, and audit cadence. Multi-state operators (MSOs) face the additional burden of running compliant operations across multiple track-and-trace systems simultaneously.

The three event categories every dispensary must report

Receiving events. Every package received from a cultivator, manufacturer, or distributor logged with: package tag (the unique state-issued identifier), product, quantity, source license, transfer manifest reference, date / time, receiving employee.

Sales events. Every transaction logged with: package tag (which inventory the units came from), patient / customer ID (medical) or anonymous transaction ID (recreational), product, quantity, purchase amount, sales tax, employee. Real-time or within 24 hours depending on state.

Adjustment events. Every change to inventory that isn't a receive or sale: damage, theft, internal use (sample for staff training), waste / disposal, return to vendor. Each must have a reason code and supporting documentation.

The system reconciles continuously. If your physical count doesn't match the state's expected count for a given package tag, you have a finding waiting to happen.

Where typical cannabis dispensaries fall short

Reactive METRC entry. Sales rung up at the POS during the day; METRC entries done in batch at end of day. State expects "real-time or near real-time"; some jurisdictions have specific 24-hour windows. Batch entry creates lag where the state's expected count and the actual count don't match for hours.

Adjustment events under-documented. Damaged product disposed without a proper reason code + photo + manager approval. Looks like inventory just disappeared from the system.

Multi-room transfer tracking weak. Product moves from cure room to inventory room to retail floor without all transfers being logged. Physical product moves; system record stays in original location.

Manifest verification skipped at receiving. Transfer manifest from cultivator says 1,000 units; receiving employee scans 998 units; nobody investigates the 2-unit gap. State sees 1,000 expected; physical is 998. Finding.

Discontinued SKUs not properly disposed. Old packages that didn't sell sit in storage, not transferred to disposal, not zeroed out in the system. Inventory drift accumulates.

What disciplined cannabis dispensary inventory looks like

1. Real-time sales-to-track-and-trace integration. POS system writes to METRC / BioTrack at the moment of sale, not at end of day.

2. Manifest verification at receiving with photo evidence. Every inbound transfer manifest verified against physical count; discrepancies investigated and resolved before the receiving event is closed.

3. Daily three-way reconciliation. Physical count + POS count + state-system count, reconciled daily. Variances investigated immediately.

4. Adjustment events with documented chain of custody. Damage / theft / disposal logged with timestamp, employee, photo, reason code, and (for high-value) manager approval.

5. Vault / safe access logged. Restricted-access areas logged for entry / exit with employee identification. Cameras with retention period meeting state requirements.

6. Quarterly internal mock-audit. Pick a random 20-30 packages, trace each one from receipt through current state. If you can't reconstruct the chain in under an hour per package, the system has gaps.

The product categories with extra discipline

Edibles + concentrates. THC content limits per package, lot-level potency testing required, expiry dates relevant. Disposal of expired product is itself a tracked event.

Vape products. Recent vape-related lung-illness scares triggered enhanced ingredient + lot tracking. Expect enhanced documentation expectations from regulators.

Live plants / clones. Plant tags from cultivation through trim through inventory. Plant-tag chain of custody is its own discipline.

Disposal. Cannabis waste must be disposed per state regulations (typically rendered unusable then disposed in a manifested waste stream). Disposal events logged in track-and-trace.

The audit reality

State cannabis regulators conduct routine and targeted audits. Routine audits typically focus on: data accuracy (state system vs physical), transfer chain integrity, sales-tax compliance, adjustment-event documentation. Targeted audits typically follow a complaint, a discrepancy report, or a specific investigation.

Findings range from corrective-action notice (mild) to monetary fine (typical) to license suspension (serious) to license revocation (severe). Cannabis license value in mature markets is in the millions — losing one is business-ending.

Where ShelfLifePro fits for cannabis (US states where legal)

ShelfLifePro is not a replacement for METRC / BioTrack — those are state-mandated and you must use them. We're the operational inventory layer that sits between your POS and the state system, ensuring the data flowing into the state system is accurate, complete, and well-documented.

Specifically: lot capture at receipt with manifest verification, daily three-way reconciliation, adjustment events with documented chain of custody, expiry-date tracking on edibles / concentrates, mock-audit reports on demand.

Note: ShelfLifePro operates in compliance with applicable state cannabis regulations only. We do not facilitate any federally illegal activity.

Free 14-day trial.

Related reading

SE

ShelfLifePro Editorial Team

The ShelfLifePro editorial team covers inventory management, expiry tracking, and waste reduction for pharmacies, supermarkets, and retail businesses worldwide.

See what batch-level tracking actually looks like

ShelfLifePro tracks expiry by batch, automates FEFO rotation, and sends markdown alerts before stock expires. 14-day free trial, no credit card required.

Newsletter

Weekly expiry-tracking playbook

One short email every Tuesday. FEFO tactics, markdown math, and real-world waste-reduction wins. Unsubscribe anytime.

No spam. Unsubscribe in one click.